Processing of (personal) data by the entity in charge of the online application process
Privacy Notice for Applicants
According to the requirements of art. 13 GDPR related to the information obligations, this privacy notice provides you with information on OpenSynergy’s data processing activities regarding your application:
Data processing responsible in the frame of the application process is
OpenSynergy GmbH
Rotherstraße 20
10245 Berlin
Germany
E-Mail: info@opensynergy.com
Our data protection officer
We have appointed a data protection officer for OpenSynergy. You have the possibility to contact our data protection officer using our postal address or at the email below:
Type and purpose of the data processing
If we have received data from you, we will only process it for the purpose for which we have collected it.
These purposes are usually:
- the justification and the establishment of an employment relationship in the course of an application process
- the entry in our applicant pool in order to identify any possible vacancies of interest to you and eventually contact you again
With the reception and the processing of your application, we collect the following data:
- first and last name
- address
- telephone number
- job description
- email address
- further data you provide in your application materials (CV, certificates)
If you provide us with additional personal data about yourself (e.g. a photo) that is not required, this is done on the basis of your voluntary decision.
Legal basis of the data processing
Legal basis for processing your application is art. 6 para. 1 sentence 1 lit. b and art. 88 para. 1 GDPR in connection with § 26 para. 1 sentence 1 BDSG/Bundesdatenschutzgesetz (federal data protection act). If you application is unsuccessful, your data will be processed in the applicant pool on the basis of your consent in accordance with art. 6 para. 1 lit. a GDPR. Please note you can revoke this consent at any time by sending us an e-mail to datenschutz@opensynergy.com.
How long shall the data be stored?
- employment: if we conclude an employment contract with you, we store the data we collect and the data you voluntarily provide for the duration of your employment relationship respectively for the legally required retention period.
- rejection: if we reject your application, we will save your application data for a maximum of six months after your application has been rejected.
- applicant pool: if you have given us your separate consent, we will store the data you have submitted in your application in our applicant pool for twelve months after the end of the application process to identify any other vacancies of interest to you and to contact you again if necessary.
To which recipients is the data passed on?
We use the technical support of the Software of Personio for our application process. Personio is provided to us by Personio GmbH. The data you submitted will be processed by Personio on our behalf for the purpose of carrying out and processing the application process. We have concluded a data processing agreement with Personio GmbH according to the requirements of art. 28 para. 3 GDPR.
Visiting the site/Cookies
Access data is automatically collected from your web browser each time you access our website. Access data includes in particular:
- IP address of the requesting device
- date and time of access
- address of the web page accessed and the requested web page
- web browser you use and the operating system of your device
- online ID (e.g. device IDs, session IDs).
The processing of the access data is only collected for the purpose of enabling you to visit the website and to ensure the long term functionality and security of our system. In this respect, legal basis for the data processing is art. 6 para. 1 lit. f GDPR. Our legitimate interest follows the aforementioned purposes. For data protection reasons, log files are only stored or analyzed temporarily.
When you visit and use our website, so-called “session cookies” are installed and stored on your computer. Cookies are small text files that are used to make the use of our services more user-friendly, more efficient and safe. They do not cause any damage to your computer and do not contain any viruses.
As a rule, session cookies are automatically deleted after your visit. You have the option of deactivating the storage of cookies by making appropriate settings in your browser. However, we would like to point out that you may in this case not access all functions of this website without restrictions. In this respect, the legal basis for the data processing is art. 6 para. 1 lit. f GDPR.
For more detailed information, please have a look at the cookies section in our privacy notice.
Online meetings via Microsoft Teams ("Teams")
For a first and/or consecutive interviews we may use Teams if it is preferable to a face-to-face meeting or an initial telephone call. Teams is a software of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"), available as desktop, web and mobile app. It is used by us in particular for conducting digital conferences with business partners and applicants.
Legal basis for data processing is our legitimate interest in the effective conduct of meetings in accordance with Art. 6 para. 1 lit. f GDPR. We are not responsible for further data processing on the product website of Teams, where the desktop software can be downloaded, and the web app can be used.
During a meeting the following data may be processed under certain circumstances:
Information about the participant: if applicable, display name, first name, last name, telephone, e-mail address, password (encrypted for authentication), profile picture;
Metadata: meeting topic and description, IP address, participant's phone number, type of device/software (Windows/Mac/Linux/Web/iOS/Android Phone/Windows Phone), time of participant´s last activity on teams, number of chat and channel messages, number of meetings attended, duration of time for audio, video, and screen sharing;
When using chat or channel messages: text data for display and, if applicable, logging;
For audio use: recording data of microphone;
When using video: recording data of video camera;
For phone usage: incoming and outgoing phone numbers, country name, start and end time, if applicable other connection data, such as the IP address of the device.
In order to participate in a meeting, you must at least provide information about your name and - in case of telephone use - your telephone number, unless we make it possible to participate anonymously in meetings. In the latter case, we will inform you of this possibility of anonymous participation in the invitation. You can deactivate transmission via microphone and camera at any time via the corresponding settings. We will only record meetings or log text data with your consent and prior notification. Microsoft stores and uses the metadata to enable us to analyze and report on team usage.
Microsoft may obtain knowledge of the above-mentioned data in the course of processing orders in order to process them. All data traffic is encrypted (MTLS, TLS, or SRTP) and is generally performed at European servers. In case data are processed in the USA, we have agreed upon Standard Contractual Clauses with Microsoft as legal basis for data transfer and Microsoft has registered under Data Privacy Framework. Therefore, the transfer of personal data is based on the EU Commission's latest adequacy decision for data transfers to the USA. For more information, please find enclosed the Microsoft Privacy Policy.
Your rights
You have the right to request information about the processing of your personal data by us according to art. 15 GDPR. Furthermore you have the right to rectification in accordance to art. 16 GDPR, the right to erasure under art. 17 GDPR, the right to restriction of processing under art. 18 GDPR, the right to notification under art. 19 and the right to data portability under art. 20 GDPR.
Also, you have the right according to art. 21 GDPR to object to the processing of your personal data, insofar as the processing of your personal data takes place in accordance with art. 6 para.1 lit. f) GDPR.
Insofar as the processing of your personal data takes place on the basis of your consent, you are entitled to revoke your consent to the processing of your personal data at any time in according to art. 7 para. 3 GDPR. Please note that the revocation will only take effect in the future.
Right of appeal
You have the right to file a complaint about the personal data processing to the data protection supervisory authority responsible for us. You can assert this right with a supervisory authority in the Member State in which you are resident, your place of work or the place of the suspected infringement. In Berlin the competent supervisory authority is: Berlin Commissioner for Privacy and Freedom of Information, Friedrichstr. 219, 10969 Berlin, Germany.